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(57)Abstract 

PROBLEM TO BE SOLVED: To simultaneously execute fault 
detection, internal state coincidence and load distribution and to 
attain a high reliablity/load distribution mechanism capable of 
reducing the number of messages by sharing a time measurement 
start request message or the like for fault detection due to time-out, 
autonomously collecting information related to loads to a suitable 
node and using a clock of a false management object 
SOLUTION: The time measurement start request message for fault 
detection due to time out and a duplicate message for object restart 
at the time of a fault are shared. A message for maintaining the 
consistency of internal states of duplicates, a disuse request 
message for a duplicated message to be required at the time of a 
fault and the notification message of information related to loads to 
respective nodes 11 to 13 are shared. Thus the reexecution of a 
duplicate is prevented by autonomously collecting information related to loads to a node 10 and using the 
clock 1 000 of the false management object of which existence is sensed fi^om the external. 

* NOTICES * 




JPO and INPIT are not responsible for any 
damages caused by the use of this translation. 



1 This document has been translated by computer. So the translation may not reflect the original precisely. 



2.**** shows the word which can not be translated. 
3.1n the drawings, any words are not translated. 
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CLAIMS 



[Claim(s)] 

[Claim 1]In a distributing system based on object-orientation, this object is reproduced to plurality, Make 
one of the reproduced objects into an execution system, make the remainder into a standby system, and 
high-reliability-izing and a load sharing mechanism are formed for every plat form of each node. Although 
substance as an object does not exist, it is that only a name of an object and an identifier exist in said 
high-reliability-izing and load sharing mechanism, It is set up so that a false management object observed as 
it exists fi-om the outside may be installed regardless of a node in which this duplicate object exists, A high 
reliability object is formed by this false management object and said duplicate object, While storing a name 
of an object, and an object identifier and forming high-reliability-izing and a load sharing mechanism in a plat 
form of a node in which this false management object exists. It is observed by existence of an object fi-om 
the exterior and this high-reliability-izing and load sharing mechanism. After detecting a message 
transmitted to this addressing to a false management object, transmit this message to said execution 
system duplicate OBUJIEKU, start a method of this duplicate object, perform operation of the purpose of 
this object, and at the time of an end of execution of a method. By transmitting a message which maintains 
the consistency of an internal state from an execution system duplicate object to a standby system 
duplicate object, High-reliability-izing and a load sharing mechanism on a node in which said false 
management object exists when the consistency of an internal state between duplicate objects is 
guaranteed and an execution system duplicate object breaks down. By cooperation with 
high-reliability-izing and a load sharing mechanism on a node in which a standby system duplicate object 
exists. Detect said failure, next choose one of the duplicate objects, make this duplicate object into an 
execution system duplicate object, and a message which an execution system duplicate object before 
failure received is reproduced, By transmitting this message to an execution system duplicate object after 
failure detection, An execution system object which recovered said failure and was newly chosen after 
detection of said failure, A rerun is barred when acting on external objects other than this object, and this 
external object is an operation of the 2nd henceforth, When failure does not occur in an execution system 
duplicate object, and cancelling unnecessary information in information about duplicate management for 
every end of 1 method execution of this execution system duplicate object and communicating information 
about duplicate management between nodes, High-reliability-izing and a load sharing method in a 
distributing system transmitting information about load of this node simultaneously, and performing load 
sharing using this information. 

[Claim 2]In high-reliability-izing and a load sharing method in the distributing system according to claim 1 , a 
message which maintains the consistency of an internal state of said duplicate object. As a checkpoint for 
every end of execution of one method of an execution system duplicate object. Information about an 
internal state of an execution system duplicate object is notified to high-reliability-izing and a load sharing 
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mechanism of a node in which a standby system duplicate object exists, High-reliability-izing and a load 
sharing method in a distributing system, wherein said high-reliability-lzing and load sharing mechanism in 
which this information was received update an internal state of a standby system duplicate object. 
[Claim 3]In high-reiiability-izing and a load sharing method in the distributing system according to claim 1 , a 
procedure of said failure detection, A message addressed to this false management object to which 
high-reliability-izing and a load sharing mechanism of a node in which said false management object exists 
have been transmitted from the outside is detected. Transmit this message to a duplicate object of an 
execution system, and this execution system duplicate oi^ect is made into a method run state, Transmit a 
duplicate of this message to high-reliability-izing and a load sharing mechanism of a node in which a standby 
system duplicate ofcyect exists, simultaneously, and high-reliability-izing and a load sharing mechanism in 
which this message was received carry out an opportunity [ reception of this message ], the node, when 
information about an internal state transmitted to within a time [ which started time measurement and was 
beforehand defined with a local timer ] at a node of a standby system duplicate object at the time of an end 
of execution of a method of an execution system does not arrive, High-reliability-izing and a load sharing 
method in a distributing system judging that an execution system duplicate object is out of order. 
[Claim 4]In high-reliability-izing and a load sharing method in the distributing system according to claim 1 , a 
procedure of said failure recovery, When the operation according to claim 3 detects failure, in order to 
change an execution system, A priority which makes an execution system duplicate object the highest 
priority is given to all the duplicate objects in order, Inside of high-reliability-izing and a load sharing 
mechanism of a node in which a standby system duplicate object exists, A duplicate object which exists in 
this node and has the next priority of an execution system is made into an execution system, From 
high-reliability-izing and a load sharing mechanism of a node in which a false management object exists. A 
duplicate of a message thought to have been indicated to claim 3 is transmitted to a duplicate object which 
was a standby system of this node, High-reliability-izing and a load sharing mechanism of a node in which 
other duplicate objects exist, and high-reliability-izing and a load sharing mechanism of a node which a false 
management object exists are received, . Transmit a message which shows that an execution system 
changed and have by high-reliability-izing and a load sharing mechanism of a node in which this false 
management object exists. High-reliability-izing and a load sharing mechanism on a node in which a 
duplicate object which changed information which has managed which duplicate object an execution system 
is, and newly changed to an execution system exists. As opposed to high-reliability-izing and a load sharing 
mechanism on a node in which a duplicate object which was an execution system before exists, 
High-reliability-izing and a load sharing mechanism of a node in which a message of a reboot of an object or 
a node is transmitted and what has a priority high next exists in a duplicate object, High-reliability-izing and 
a load sharing method in a distributing system changing to an execution system and performing the 
above-mentioned recovery instead when it is not reported that an execution system changed to within a 
time [ which was defined beforehand ] after failure detection. 

[Claim 5]In high-reliability-izing and a load sharing method in the distributing system according to claim 1 , a 
procedure which prevents an operation 2nd after an object of said exterior, Although it is a different 
duplicate object, at the time of failure recovery in one high reliability object. In order to prevent influence on 
the exterior by the same method being performed, high-reliability-izing and a load sharing mechanism of a 
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node in which the false management object according to claim 3 exists, it can set to the node when a 
message is received from an object identifier and the exterior of a false management object in a message 
which transmits to a duplicate object — physical or logical time [ being local ], [ attach and ] When an 
execution system duplicate object gives an operation to the exterior by processing requested from message 
transmission to the exterior, or an execution environment, a node to which an object identifier of said false 
management object and a false management object exist in an argument of a function of processing 
requested from this message or an execution environment — local time, [ give and ] Defined these as a 
rerun prevention tag collectively, and received a message with this rerun prevention lag, or when there is a 
request of processing with a tag, make the end product of this tag and processing by them into a group, and 
high-reliability-izing and a load sharing mechanism save. When there was the same thing as this tag at the 
time of a rerun and it is detected. Without rerunning when the end product is required, High-reliability-izing 
and a load sharing method in a distributing system suppressing side effects of a rerun of a duplicate object 
and considering a rollback point which should be chosen from a checkpoint as an end time of the latest 
method by that cause by returning a saved value. 

[Claim 6]A procedure which cancels what becomes unnecessary for information about said duplicate 
management in high-reliability-izing and a load sharing method in the distributing system according to claim 
1 , In order to cancel what became unnecessary for information which manages a duplicate, at the time of an 
end of execution of the existing method according to claim 2. When information about an internal state is 
notified to a standby system duplicate object from a duplicate object of an execution system, about 
message transmission to the exterior and execution environment request processing which were performed 
within the method according to claim 5, When high-reliability-izing and a load sharing mechanism of a node 
in which a duplicate object of an execution system exists transmit to high-reliability-izing and a load sharing 
mechanism of a near node which acted, a message which cancels information saved with a tag, 
High-reliability-izing and a load sharing method in a distributing system cancelling information which became 
unnecessary. 

[Claim 7]In high-reliability-izing and a load sharing method in the distributing system according to claim 1, in 
said high-reliability-izing and load sharing mechanism. A message handling mechanism in a kernel has a 
small quantity and a high-speed translation table which are changed into an identifier of a duplicate object 
from an identifier of a false object. Transmit a message to a duplicate object of an execution system, and an 
end of a method of a duplicate object of an execution system of a high reliability object is detected. In a 
node which notifies an end of method execution to a duplicate message management server object of a 
node in which a standby system duplicate object exists and in which a duplicate object of a standby system 
exists in a duplicate message management server object. If a notice in which a duplicate of a message which 
a duplicate object of an execution system received was saved at, and a duplicate object of an execution 
system ended execution of a method troubleHree is received, By not coming to within a time [ which a 
terminating notice of this execution defined beforehand further ], at the time of failure detection, cancel a 
saved message, detect failure of an execution system, issue directions of recovery also to other nodes 
further, and a duplicate object identifier management server object. When tables changed into an identifier 
of a duplicate object from an identifier of a false object in a kernel run short, by the inquiry from a message 
handling mechanism in a kernel. Return an identifier of a duplicate object and an object executed result 
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management server object. When a certain object ends execution of a method, preservation as a result of a 
message used as an opportunity of starting of this method and execution is performed, At the time of failure, 
it detects that it is a message retransmission fr'om the same high reliability object, Prevent performing the 
same operation and an object duplicate ol^ect execution control server object, High-reliability-izing and a 
load sharing method in a distributing system managing information about a state of execution of a duplicate 
object on a certain node, or a priority of high-reliability-izing, and performing cancellation and starting of a 
duplicate object 

[Claim 8]In high-reliability-izing and a load sharing method in the distributing system according to claim 1 , a 
procedure of load sharing between said nodes. As opposed to high-reliability-izing and a load sharing 
mechanism of a node in which the standby system duplicate object according to claim 2 exists. When 
notifying information about an internal state of an execution system duplicate object, High-reliability-izing 
and a load sharing mechanism of a node in which information showing load of a node in which an execution 
system duplicate object exists is notified, and a standby system duplicate object exists. When a direction of 
a self-node detects that load is light using said information, High-reliability-izing and a load sharing 
mechanism of a node in which a switching request of an execution system is notified to high-reliability-izing 
and a load sharing mechanism of a node in which a false management object exists, and this false 
management obyect exists, High-reliability-izing and a load sharing method in a distributing system choosing 
which [ of the duplicate objects ] is made into an execution system using information about notified load. 
[Claim 9]In high-reliability-izing and a load sharing method in the distributing system according to claim 1 , a 
procedure of load sharing between said nodes, By notifying information other than load information for every 
time of a node to high-reliability-izing and a load sharing mechanism in a node in which a false management 
object exists, High-reliability-izing and a load sharing method in a distributing system choosing which [ of 
the duplicate objects ] is made into an execution system, and performing load sharing dynamically. 
[Claim 10]In high-reliability-izing and a load sharing method in the distributing system according to claim 1, 
a procedure of load sharing between said nodes, High-reliability-izing and a load sharing method in a 
distributing system characterized by moving a duplicate object to a node with light load using information on 
load of a node accumulated on a node in which a false management object indicated to claim 8 exists. 
[Claim 1 1]In high-reliability-izing and a load sharing method in the distributing system according to claim 1, 
a procedure of load sharing between said nodes, High-reliability-izing and a load sharing method in a 
distributing system characterized by deciding a generation place and a priority of a duplicate object using 
information on load of a node accumulated on a node in which a false management object indicated to claim 
8 exists. 



DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention]In this invention, two or more execution substance is divided into an execution 
system and a standby system in the object which operates by a distributed computing environment 
Therefore, it is related with the recording medium which recorded high-reliability-izing in the distributing 
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system which can realize high-reliability-izing and load sharing, the load sharing method, and its processing 

program. 

[0002] 

[Description of the Prior ArtGThere is art of operating an object by a distributed computing environment, by 
making the object which is a motion unit of an object-oriented system into the method of 
high-reliability-izing. When a distributing system realizes high-reliability using a duplicate, the overhead of 
the mechanism in which consistency is maintained between the duplicate becomes large. For example, in 
the method of using the below-mentioned PassiveReplication. All the duplicates process in the same order 
also by the method of the special processing for maintaining internal state consistency being needed, and 
using Active Replication, and processing in which the operation to the exterior is summarized to one is 
needed. With the distributing system, since it is difficult to detect failure efficiently, in many systems, failure 
has been detected using a clock. However, although failure has not arisen, when time to exceed anticipation 
for the load of a communications network or the node itself is spent on processing, by this method, it may 
be regarded as failure. In an international congress "IntemationalSymposium on Fault-Tolerant Computing" 
as an example actually studied conventionally, "The Delta-4 Approach to Dependability in Open Distributed 
Computing System" (1988), There is the architecture called Delta-4 announced by "Using Passive 
Replication in Delta-4 to Provide Dependable Distributed Computing" (1989). Although this is studied also 
about which [ of PassiveReplication/ActiveReplication ] case, the above-mentioned problem about failure 
detection is not still solved. 

[0003]There is Fault-Tolerant Concurrent C by Active Replication as an example of the approach which 
supports the processing which summarizes the operation to the exterior to one by the linguage processing 
system. This to "International Symposium on Fault-Tolerant Computing." It is announced as 
"Fault-Tolerant ConcurrentCiA Tool for Writing Fault-TolerantDistributed Programs." Since the system 
call in which a kernel adjusts the operation to the exterior of two or more duplicates would also be added 
automatically and will have realized Active Replication if an execution code is obtained using this linguage 
processing system, an application programmer is not made conscious of existence of a duplicate. However, 
since the overhead at the time of execution becomes very large, when you do not need Active Replication, 
it cannot apply. As research using Passive Replication, There is "Implementing Fault-Tolerant Distributed 
Objects" published by "IEEE Transactions on Software Engineering" (the June, 1 985 item). This is Passive 
Replication fundamentally and considers the mechanism in which the operation to the exterior is not made 
to perform. However, although it distinguishes that it is the operation from a certain Fault-Tolerant 
Distributed Object, the identifier of the execution thread is used, and it becomes a high cost in order to 
detect, if this becomes multistage. Usually, at the time of execution, without creating the duplicate of 
execution substance, only the data requirement is reproduced to the node and the system of nOR based on 
the idea of Lasy Fault Tolerance which becomes at the time of failure and reproduces execution substance 
is also studied. This is announced as "a high reliability-ized method of the distributed processing system 
based on data-decentralization-izing and object reconstruction" of the "Information Processing Society of 
Japan paper magazine" (the October, 1 995 item). However, if it is this method, for this reason, time from 
failure recovery cannot adopt it as a system with a severe demand of real-time requirement greatly. 
[0004] 
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[Problem(s) to be Solved by the Invention]Thus, in the above-mentioned all directions type, failure 
detection and consistency maintenance processing of the internal state are performed separately 
fundamentally. In this, between execution substance etc., an excessive message will fly about and 
degradation of performance will be caused. When creating two or more execution substance, load sharing 
can also be performed besides high-reliability-izing, but for load sharing, the information on the load of each 
node is needed. In order to collect these information, a new message flies about and it becomes one cause 
of performance degradation. After all, it becomes a technical problem of this invention to solve the following 
problem. Namely, when creating the object which provides two or more execution substance and carries out 
high reliability operation in a Prior art on a distributing system. Since it has two or more points that 
excessive execution cost starts, and execution substance in losing the operation to the exterior by the 
reboot of an object which is chosen and changed and in which the consistency maintenance of the internal 
state during a duplicate, failure detection, and an execution system carry out high reliability operation. It is 
the point that excessive execution cost also starts realization of the load sharing using it The purpose of 
this invention solves the technical problem of these conventional technologies, and can perform 
simultaneously failure detection, internal state coincidence, and load sharing. Also when high-reliability-izing 
and a load sharing mechanism with few messages can be realized and two or more high reliability objects are 
performed simultaneously, it is in providing high-reliability-izing and the load sharing method in the 
distributing system of low cost used as hindrance. 
[0005] 

[Means for Solving the Problem]In order to attain the above-mentioned purpose, in high-reliability-izing and 
a load sharing method in a distributing system of this invention. A time test starting request message for 
failure detection by timeout. Carry out the duplicate messages for an object reboot at the time of failure in 
common, and A message for consistency maintenance of an internal state during a duplicate, A cancellation 
request message of the duplicate messages which must have been needed at the time of failure. By carrying 
out a notiflcation message of information about load of each node which is needed for load sharing in 
common, bringing information about load together in a suitable node autonomously, and using outside a 
clock of a false management object by which existence is sensed. The reruns of a duplicate are prevented 
and this obtains high reliability execution and load sharing execution. A storage which recorded a processing 
program for gaining high reliability execution and load sharing execution is realized. 
[0006] 

[Embodiment of the Invention]Hereafter, a drawing explains the principle of operation and example of this 
invention in detail. 

(Principle of operation) Drawing 9 is a figure of the switchboard control by the object of two or more nodes 
to which this invention is applied. In recent years, in order to process more correctly early the information 
which complicates [ extensive-ization ] and broadens and is generated with diversification of a 
socioeconomic activity, and an advancement, the importance of the information processing system using a 
computer is increasing. For example, in a digital data exchange, a message-exchange function is needed in 
the ability of many users to communicate with many partners. Since a variety of computers and terminals 
are connected to a digital data exchange, the information processing function corresponding to them is also 
needed. In drawing 9 , in the data switching network, two or more nodes are connected by the 
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communications network (switchboard), and the driver object and IN object are installed within each node. 
Transmission and reception of a message are performed between the objects in each node. Drawing 10 is a 
figure of a distributed plat form (distributing system). When message communication is being performed 
between the objects 108 of two or more nodes 25, in the portion above the plat form 3000, he does not need 
to be conscious of a distributing system at all. On the other hand, in the portion below the plat form 3000, 
I.e., servers, and the kernel, he is conscious of the distributing system. Between kernels, actual 
communication is performed via communications network hardware. 

[0007]By the way, methods for realizing high reliability operation of such an information processing system 
include the technique of generally reproducing execution substance. There is Passive Replication in which 
the remainder stands by by only Active Replication in which all the duplicates perform the target function 
simultaneously as an execution gestait of this duplicate, and one duplicate performing the target function. 
Although recovery of overly high-speed failure is possible for Active Replication, it is necessary to collect 
what acts a duplicate outside, and execution cost becomes high. On the other hand, although recovery of 
the failure in which Passive Replication is overly high-speed is difficult compared with Active Replication, it 
is suitable for performing with a distributing system, and execution cost can also be held down low. Although 
high reliability-ization is gained by Passive Replication in a distributed object inclination execution 
environment, it is necessary to guarantee the consistency of an internal state between duplicates (the 
following, duplicate object). Unless it guarantees this, right execution cannot be guaranteed when execution 
substance (the following, execution system) is changed. In order to guarantee this, an internal state is saved 
In the place which is hard to be destroyed in the timing of a suitable checkpoint. There is no inconvenience 
also on the calculator memory which the preservation place in this case has in a remote place also at a 
place like the neighborhood of CPU which is operating, for example, a hard disk. When failure breaks out, the 
optimal point (rollback point) will be determined between related objects from a set of the time saved, 
respectively, and execution will be resumed from there. Since an object may act outside via message 
transmission etc. mutually, generally it is difficult to determine a rollback point fi'om this checkpoint This 
has description, for example in Yoshifumi Manabe of Information Processing Society of Japan ''information 
processing" (the November, 1 993 item), and Shigeki Aoyagi collaboration "distributed checkpoint rollback 
algorithm. 

[0008] Drawing 7 is a figure showing the situation at the time of failure breaking out, when there is no 
duplicate of a message, drawing 3 is a figure showing reception of the message of a high reliability object, 
and drawing 5 is a figure showing the end of the method of a high reliability object In this invention, the 
influence on the exterior by a message etc. is solved by considering it as the mechanism which prevents a 
rerun by making the end time of each method under execution of all the high reliability objects into a 
checkpoint for the aforementioned problem. In rebooting an otyect, the message used as the opportunity of 
execution of an object is needed. When it was a method, i.e., the method which transmits the message 420 
only to the duplicate object 105 of an execution system, as shown in drawing 7 a nd the node 20 whole 
breaks down, the reboot will be impossible, even if it is lost by message 420 the very thing and an execution 
system changes to the duplicate object 105. Namely, although the node 20 has the execution system 
duplicate object 105 and the standby system duplicate object 106 exists in the node 21, It becomes the 
situation which cannot be rerun since there is no message 420 even if it is lost by the message 420 in failure 



JP HlO-207849 

and changes to the node 21, since only the object 105 transmitted the message 420. Therefore, the 
duplicate of a message as shown in drawing 3 is needed. When there will be no answer by the time beyond 
fixed time passes using a clock in order to perform failure detection with a distributing system, it is common 
to use the timeout method suspected to be failure. However, at this time, it is necessary to determine, 
respectively whether to measure time until measuring time from which time or what happen. 
[0009]In this invention, it has solved combining the duplicate of the message which mentioned this problem 
above, and the message for a consistency guarantee of an internal state. That is, as shown in drawing 3 , the 
reproduced message is distributed by each node (1 1 , 1 2, 1 3), this starts measurement of time by the nodes 
12 and 13 of a standby system, and time until the message (412,413 of drawing 5) for a consistency 
guarantee of an internal state comes at the time of the end of a method is timed. Thereby, the excessive 
message which is needed only for failure detection does not fly between nodes. The object identifier 201 of 
the local time of a false management system (node 1 0 with the false management object 1 100 of drawing 3) 
and the false management object 1100 is used. The operation performed via a message etc. out of the 
duplicate object of the execution system in a high reliability object is identified. The influence which the 
same message from the same high reliability object by the reboot of a duplicate object has outside by this 
can be lost It can be coped with also when there is the moment two or more duplicate objects of an 
execution system exist at the time of failure, by this. And by notifying the loaded condition of the node 
(node 1 1 of drawing 5 ) of an execution system to the node (similarly nodes 12 and 13) of a standby system 
into the message of an internal state consistency guarantee, When the node of a standby system judges 
autonomously and judges that the duplicate object on a self-node should become an execution system, it 
notifies to the node (the node 10) of a false management system, and this also realizes load sharing 
simultaneously. Drawing 3 a nd drawing 5 a re explained further in flill detail. 
[0010](EXAMPLE) 

[Composition of a high reliability object] Drawing 1 is a software configuration figure of the high 
reliability-ized system of an object in which one example of this invention is shown. In drawing 1 , the hi^ 
reliability object 1000 comprises the duplicate object 1200 of an execution system, and the duplicate object 
1300-1301 of the standby system. For example, if the object identifier 201 of the external object of 100 
shots and the message 400 addressed to name 301 of an object reach the node 10, High-reliability-izing and 
the load sharing mechanism of the node 10 (message handling function in a kernel) detect the message, and 
transmits to the duplicate object 1200. The duplicate object 1200 which received transmission of the 
message 400 performs a method. Since the message which transmitted is processed without also causing 
error [ what ] if it observes from the outside at this time, it is observed as the object of the object identifier 
201 and the name 301 of an object exists. And existence of a duplicate object is not observed. On the 
contrary, the message from the duplicate object 1 200 of an execution system is observed as if it was the 
message 401 transmitted by processing of high-reliability-izing and a load sharing mechanism from the 
object of the object identifier 201 on the node 1 0, and the name 301 of an object Also at this time, from the 
exterior, it is observed as the object of the object identifier 201 and the name 301 of an object exists. 
According to that is, the processor of the message of high-reliability-izing and the load sharing mechanism 
of the nodes 10 and 12. The false management object 1100 which does not exist actually can exist, and the 
false management object 1100 can grasp that operation of the duplicate objects 1200-1300 and 1301 is 
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managed. It is observed as access from the outside is performed to the false management object 1 100. 
[0011][Composition of high-reliability-izing and a load sharing mechanism] Drawing 2 is a software 
configuration figure of high-reliability-izing and a load sharing mechanism. The details of each server object 
are mentioned later. In drawing 2, high-reliability-izing and the load sharing mechanism 2010 are stored in 
the platform 3001 of the node 16, and this is reproduced, transmitted and stored in the nodes 17, 18, and 19 
(respectively 201 1-2012, 2013). The detection function of the message about an object with the kernel 2100 
specific to the kernel of the usual distributed operating system is added. Although the usual inter object 
communication 422 is performed between the objects of the node 17 and the node 18, after getting down in 
the plat form 3001 actually, it can be distributed to the purpose object (423,424,425,426). When straddling a 
node, in straddling the node 19, for example, it goes via a message queue (2050-2060). Therefore, this 
detection Hinction is realized by adding a little reconstruction to the scheduler message handler of the 
kernel 2100, etc. By this detection function, the operation to the message addressed to a false management 
object and the exterior of a duplicate object is detected, and processing related to high reliability operation 
and load sharing operation is performed. When a message is transmitted to the duplicate object of ****** 
from a false management object by the kernel, the duplicate of the message is made. This reproduced 
message is received and saved by the duplicate message management server object 2200 of the node in 
which the duplicate object of a standby system existe. The duplicate message management server object 
2200 times time from this message reception, and is related also to failure detection. 
[001 2]When the message transmission from a different duplicate object in the same high reliability object, 
etc. break out, the object executed result management server object 2300 realizes the mechanism which 
prevents method starting by the message transmission. When a kernel obtains the identifier of the duplicate 
object of an execution system, etc. from the object identifier of a false management object, etc., the 
duplicate object identifier management server object 2400 is used in order to make small the memory area 
which a kernel uses. When there is no target entry in the translation table in the kernel 2100, specifically, it 
asks the duplicate object identifier management server object 2400. The contents of the translation table in 
a kernel can also be changed by sending a message to the duplicate object Identifier management server 
object 2400 from the exterior. The duplicate object execution control server object 2500 manages the run 
state of the duplicate object which exists on the node. By the inquiry from the outside, a run state is 
returned or and the rebooting function also have an object at last Since it is decided that the 
above-mentioned server object (2200-2500) will be each one node, an object identifier assigns the identifier 
easily understood from a node number. When performing below-mentioned high reliability operation and load 
sharing operation by carrying out like this, operation of obtaining the identifier of an object from the name of 
an object becomes unnecessary. 

[0013][Message reception of a high reliability object] Drawing 3 is a figure showing the state where a high 
reliability object receives a message and starts a method. When a high reliability object is observed from the 
outside, it seems to exist in the place where a false management object exists as shown in drawing 1 . If the 
message 405 from the outside reaches the node 1 0 in which the false management object 1 1 00 exists, it will 
detect that high-reliability-izing and the load sharing mechanism 2000 (message handling mechanism in a 
kernel) of the node 10 are addressing to the false management object 1 100. On the table which it had in the 
kernel, the duplicate object 1200 of an execution system, the duplicate object 1300-1301 of a standby 

in 
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system, and each priority are acquired from tiie false management object 1 100. Wlien the data for which it 
asks on the table does not exist, it asks the duplicate object identifier management server object of 
high-reliability-izing and the load sharing mechanism 2000 in the node 10, and required data is obtained. 
Here, the priority of a duplicate object can operate this invention, if it gives in arbitrary order, but if a high 
priority is given to the duplicate object on the node 10 in which the false management object 1100 exists, 
and the node which can perform message communication early, it can raise performance. A difference arises 
in the earliness of the message communication between nodes because a channel is congested, condition 
also differs between each node and the loads of the node itself also differ. High-reliabilityHzing and the load 
sharing mechanism 2000 (message handling Hinction in a kernel) transmit the received message 405 to the 
duplicate object 1200 of an execution system (406). Simultaneously, also to high-reliability-izing and the 
load sharing mechanism 2002-2003 (duplicate message management server object) of the nodes 12 and 13 
in which the duplicate object of a standby system exists, a message is reproduced and it transmits (407,408). 
The time of reception of the message 405 measured with the local timer of the node 10 is put into the 
reproduced next message (407,408). This time turns into method starting time of the high reliability object 
1 000. This time may also be the physical time which shows the time of the real world, or the logical time in 
the inside of a computer system. As logical time in a distributing system, it contains in a message and 
Vector Clock which makes what added one to the larger one among its logic time and the logic time in a 
message new logic time is mentioned as an example at the time of message reception. In the nodes 1 2 and 
1 3 in which the duplicate object of a standby system exists, since high-reliability-izing and the load sharing 
mechanism 2002-2003 (duplicate message management server object) save the message 407,408 which 
arrived, the duplicate object 1300-1301 does not operate, if high-reliability-izing and the load sharing 
mechanism 2002-2003 (duplicate message management server object) receive the message 407,408 — a 
node — time measurement is started with a local timer. This is used for the failure detection mentioned 
later. 

[0014][Execution of the method of a high reliability object] Drawing 4 is a figure showing the state of 
execution of a high reliability object The duplicate object 1200 of an execution system operates as an 
object usual in a duplicate object in addition to the operation to the exterior. Transmission of a message is 
used when the object 1200 acts to the object exterior. Changing and rerunning an execution system at the 
time of a failure occurrence consists of a head of a method. Therefore, if the message transmission 410 to 
the external object 101 occurs [ a certain method 500 ], when a duplicate object will be rerun at the time of 
failure, the message of the same contents as the message 410 will be transmitted to the object 101. In this, 
it will secede from a target right state by ****** which receives a message with an excessive state of the 
object 101. For example, when the object 101 changes by the number of the messages which received the 
internal state, or when generating a new object outside, the side effects by failure retransmitting a message 
to an unnecessary message must be suppressed. That is, even if the high reliability object 1000 may perform 
the method 500 twice or more at the time of failure, the mechanism in which the operation to the external 
object 101 is not caused is required. From the execution system duplicate object 1200 of the high reliability 
object 1000 to the message 410. The value of the sequence counter about the operation to the exterior 
within the object identifier of a high reliability object, the message reception time in a false management 
object, a method identifier, and its method is given as the tag 1 500. 

n 
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[001 5]Although the tag is attached also to the message which is unrelated to usual high reliability operation 
and load sharing operation, it only exists as the field in a message, and is not effective as a value. When a 
certain node 15 receives the message 410 addressed to object 101 of a self-node, it is investigated whether 
the tag 1500 about the high reliability is effective. If efFective, it will be investigated whether there is 
anything of the same contents as the tag 1 500. If there is nothing, it will be saved and execution of the 
method 501 will be started. And when execution of the method 501 is completed, the end product and tag 
1 500 are set and saved. When the thing of the contents as the tag 1 500 with the effectively same tag 1 500 
exists, it is judged as that from which the execution system duplicate object changed by failure in the same 
high reliability object 1000, and execution of the method 501 is not performed. When it is the message 
transmission with an answer which returns the saved end product to a high reliability object, the saved end 
product is considered as an answer When these saved information should be cancelled, it is at the end time 
of execution of the method of a high reliability object, and this is mentioned later. 

[0016][An end of execution of the method of a high reliability objectG Drawing 5 i s a figure showing the end 
operation of execution of the method of a high reliability object. High^reliability-izing and the load sharing 
mechanism of the node detect the end of execution of the method 500 of the execution system duplicate 
object 1200, and the end is notified to high-reliability-izing and the load sharing mechanism 2001. It can see 
for having ended execution of the method 500 of the high reliability object 1000 from the external 
application object at this time. High-reliability-izing and the load sharing mechanism 2001 which received 
the terminating notice. If the message transmission to the exterior performed by the method 500 or the 
history of execution environment request processing is investigated and it exists. The above-mentioned tag 
1 500 and the message 41 1 of cancellation of holds information are transmitted to high-reliability-izing and 
the load sharing mechanism 2005 of the transmission destination node 15 (object executed result 
management server object). In high-reliability-izing and the load sharing mechanism 2002-2003 (duplicate 
message management server object) of the nodes 12 and 13 in which the duplicate object of a standby 
system exists. The message 412,413 including the cancellation demand of the message (407,408 of drawing 
3) used as the opportunity which starts the method 500, the information about the load of the node 10, and 
the information about the internal state of the execution system duplicate object 1200 is transmitted. 
[0017]The node's 15 reception of the message 411 will investigate whether the tag 1500 about 
high-reliability-izing currently attached to it is effective. It is effective, and if the contents are cancellation 
of holds information, the executed result of the method corresponding to the tag will be canceled. If 
high-reliability-izing and the load sharing mechanism 2002-2003 (duplicate message management server 
object) in the nodes 12 and 13 receive the message 412,413, The message corresponding to the method 500 
is canceled out of the message (407,408 of drawing 3 ) transmitted from high-reliability-izing and the load 
sharing mechanism 2000 (ring functions, such as a message of a kernel) of the node 10 in which the false 
management object 1100 exists. The internal state of the duplicate object 1300-1301 of a standby system 
is updated for the information about the received internal state. Compare the information on load and the 
information on the load of one's node about the node 11 of an execution system duplicate object, and if the 
direction of its node has light load, The information on the load is notified to high-reliability-izing and the 
load sharing mechanism 2000 (duplicate object identifier management server object) of the node 10 in which 
a false management object exists. 

12 
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[001 8] [Failure detection of a duplicate object] Drawing 6 is a figure showing the failure detection which used 
timeout. The message 405 transmitted to the high reliability object 1000 from the exterior, 
High-reliability-izing and the load sharing mechanism 2000 (message handling function of a kernel) of a false 
management object detect actually that it is addressing to the high reliability object 1000, and The duplicate 
object 1 200 of an execution system, It transmits to high-reliability-izing and the load sharing mechanism 
2002-2003 (duplicate message management server object) of the nodes 1 2 and 1 3 in which the duplicate 
object 1300-1301 of a standby system exists. High-reliability-izing and the load sharing mechanism 
2002-2003 (duplicate message management server object) of the nodes 12 and 13 store the message 
407,408. simultaneous — the node in a kernel — a time test is started with a local timer. When execution of 
the method 500 of the execution system duplicate object 1200 is completed correctly, the message 412,413 
to that effect should come to high-reliability-izing and the load sharing mechanism 2002-2003 (duplicate 
message management server object) of the nodes 1 2 and 1 3 on the contrary. If this is not completed to 
within a time [ which was decided beforehand ], it judges with failure. 

[001 9][A change of the duplicate object by failure detection] High-reliability-izing and the load sharing 
mechanism 2002-2003 (duplicate message management server object) in which failure was detected as 
mentioned above. The priority of the duplicate object 1300-1301 which is operating on its node is 
investigated, and if its direction is high, it will be judged that the duplicate object which is operating on its 
node becomes an execution system. Here, the direction of the duplicate object 1300 presupposes that a 
priority is high. The duplicate object 1300 which newly became an execution system receives the message 
407 saved from high-reliability-izing and the load sharing mechanism 2002 (duplicate message management 
server object) of its node, and performs a method. Hig^-reliability^izing and the load sharing mechanism 
2002 (duplicate object execution control server object) raise one priority of the duplicate object 1300. Next, 
high-reliability-izing and the load sharing mechanism 2002 (duplicate message management server object), 
High-reliability-izing and the load sharing mechanism 2000 (duplicate object identifier management server 
object) of the node 10 with the false management object 1 100, and high-reliability-izing and the load sharing 
mechanism 2003 of the node 13 with the duplicate object of other standby systems. The change rate of an 
execution system is notified to a (duplicate object identifier management server object). 
High-reliability-izing and the load sharing mechanism 2003 (duplicate object execution control server 
object) raise one priority of the duplicate object 1 301 on their node. 

[0020]High-reliability-izing and the load sharing mechanism 2001 (duplicate object execution control server 
object) of a node in which the duplicate object of the execution system existed before are received, 
High-reliability-izing and the load sharing mechanism 2002 (duplicate object execution control server 
object) notify the demand of a duplicate object reboot. A notice of this message will reboot the duplicate 
object 1200 of the node 11. If the duplicate object 1200 still exists at this time, it will be rebooted after 
cancellation. When a duplicate object is rebooted by the node 11, the internal state is not maintaining 
consistency. However, when execution of a certain method is completed, the duplicate object of an 
execution system transmits the message which guarantees the consistency of an internal state to the 
duplicate object of a standby system. Therefore, even if the duplicate object reboot of a standby system 
occurs at the time of failure, the processing which guarantees the consistency of an internal state is not 
newly needed. The reaction of the duplicate object 1 200 is [ even if ] slow by the load of the node 1 1 being 
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unusually high etc., In spite of not being out of order, even if it is Judged that it is out of order, the 
above-mentioned recovery progresses and the duplicate object 1 200 of the original execution system and 
the duplicate object 1 300 of a new execution system exist, the influence on the exterior does not come out 
by operation of an object executed result management server object. After high-reliability-izing and the 
load sharing mechanism 2003 (duplicate message management server object) of the node 13 with a 
low^priority standby system duplicate object detect failure, if the change rate of an execution system does 
not arise within fixed time, It judges that all the standby system duplicate objects whose priority is higher 
than itself are out of order, and the same processing as the above for becoming an execution system by 
oneself is performed. When renewal of these tables is performed, the contents of the data it became 
impossible to put on the table in a kernel are notified to a duplicate object identifier management server 
object 

[0021] [A change by the load of a duplicate object] Previously, explanation of drawing 5 showed the state of 
the end of execution of the method 500 in the high reliability object 1000. Then, when the duplicate object of 
an execution system ends a method. The mechanism which the information on the load of each nodes 11,12, 
and 13 accumulates on high-reliability-izing and the load sharing mechanism 2000 (duplicate object 
identifier management server object) by operation of high-reliability-izing and the load sharing mechanisms 
2001-2002 and 2003 was explained. By this high-reliability-izing and the load sharing mechanism 2000 
(duplicate ol^ect identifier management server object) of the node 1 0 in which a false management object 
exists. Which duplicate object distinguishes whether it performs by the node with light load, and determines 
which duplicate object should be made an execution system on and after next time. Thereby, 
high-reliability-izing and load sharing are simultaneously realizable. 

[0022] [A change by the external information of a duplicate object] As mentioned above, the selection 
method of an execution system can be changed by giving the information on node selection to not only the 
load information of the node at the time of execution of the last method but high-reliability-izing and a load 
sharing mechanism 2000 (duplicate object identifier management server object) directly fr-om the exterior. 
Specifically, the table about the duplicate object in the kernel in high-reliability-izing and the load sharing 
mechanism 2000 and the table which a duplicate object identifier management server object has are 
changed by transmitting a message to a duplicate object identifier management server object. Thereby, 
even if it does not use execution of a method, a more flexible execution system can be chosen. 
[0023] [Load sharing when movement of an object is possible] Drawing 8 is a lineblock diagram of the load 
distribution system in the case of moving an object in an object-oriented distributing system. In drawing 8 , 
one high reliability object is constituted from the false management object 1100, the execution system 
duplicate object 1200, and the standby system duplicate object 1300-1301, Simultaneously, one high 
reliability object consists of the false management object 1 101, the execution system duplicate object 1201, 
and the standby system duplicate object 1 302-1 303. The information on the load of the nodes 11,12, and 13 
and the information on the load of the nodes 22, 23, and 24 are accumulated by high-reliability-izing and the 
load sharing mechanism 2000 (duplicate object identifier management server object) of the node 10. Let 
that external information be the information about this accumulated load in the load distribution system 
which gives the external information in this invention (refer to claim 9). For example, even if the load of the 
nodes 22, 23, and 24 becomes high and it is trouble-fi'ee, processing of the execution system duplicate 
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object 1201 becomes slow. When are diagnosed as failure by the node 23 and 24 grades, and the load of the 
nodes 11, 12, and 1 3 is low, it is also possible to move the duplicate objects 1 201 -1 302 and 1 303 to the 
nodes 11, 12, and 13, and to raise the whole throughput. 

[0024][A utilizing method of the accumulated load information] By this invention, to the node in which a 
false management object exists. Since the information about the load of a peripheral node is accumulated 
without performing message communication only for collecting especially the loads of a node, When 
generating a high reliability object, it is possible to apply to judgment to what node a duplicate object should 
be generated and whether what we do with the priority of a duplicate object 

[0025][Application to Call Manager] In addition, the object called Call Manager which exists in the call 
processing program in a distributing system is also an applied object Call Manager will generate Callee 
which performs call processing by the side of Caller which actually performs call processing, or a receptacle, 
if a certain member's call origination is detected. Since it has two or more execution substance and 
processing can be requested appropriately at the light place of load, the whole throughput goes up. In the 
example of load sharing, the following things become possible by sharing the method (refer to claim 8) by the 
load of a node, and the method (refer to claim 9) by external information to selection of an execution system. 
Namely, it is a broader^based distributing system, and since it can be experientially predicted for example, 
when the load of the node in a specific geographical place increases according to the time difference in the 
human world, operation system should just give the information toward a high reliability object If it does in 
this way, the CPU resources of a free node can be borrowed in time in a certain area, and it is possible to 
raise the whole throughput. 

[0026] [Application to high-reliability-izing and load sharing of a name server] As other applied objects, 
high-reliability-izing and load sharing of the name server (server which manages the name of an object and 
the identifier of an object) in a distributing system occur. A name server is a server indispensable although 
an object communicates on a distributing system. Since it is concealed thoroughly from what duplicate 
object the client which comes for the inquiry about a name is requested actually and high-reliability-izing 
and load sharing nature are also realized if this invention constitutes a name server, an aspect of practical 
use is also satisfactory. 

[0027] [The recording medium which records high-reliability-izing of a distributing system, and the 
processing program of the load sharing method] High-reliability-izing and the load sharing method based on 
the object-orientation stated above are realizable as a processing program for performing 
high-reliability-izing and load sharing, and the processing program can be recorded on a recording medium, 
and can be provided. 
[0028] 

[EfFect of the Invention]As explained above, according to this invention, it becomes realizable 
[ high-reliability-izing and a load sharing mechanism with few messages which perform simultaneously 
failure detection, internal state coincidence, and load sharing ]. And properly speaking, the message of 
failure detection flies about in parallel to execution of the usual object but the message preservation by 
another node and the message for internal state coincidence perform failure detection. It is also possible to 
add load information to the number of messages for internal state coincidence, and to perform load sharing. 
By these, the number of messages is greatly reducible. In this invention, since a multiple server realizes 
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high-reliability-izing and a load sharing mechanism, also when performing two or more high reliability objects 
simultaneously, it does not become hindrance. According to this invention, unnecessary waiting can be 
deleted with the mechanism in which the operation to the exterior of a high reliability object is suppressed, 
also about the mechanism of failure detection and recovery. That is, if it is the failure detection by the usual 
timeout, if there is no answer into fixed time, it will suspect for failure, and processing of a check of whether 
to be really failure is needed. In this invention, if there is no answer into fixed time, another execution 
system can be started promptly and deletion of a fi'ont execution system will be requested. It is uninfluential 
even if some front execution systems are acting outside simultaneously, before deletion Is performed. 
[Brief Description of the Drawings] 

[Drawing 1]I t is a figure of the high reliability object which makes a reserve system object reproduction 
which shows one example of this invention. 

[Drawing 2]I t is the lineblock diagram which realized high-rellability-izing and the load sharing mechanism in 
this invention by the kernel and the server object 

[Drawing 3]I t is a figure showing reception of the message of the high reliability object in this invention. 
[Drawing 4]I t is a figure showing execution of the method of the high reliability object In this invention. 
[Drawing 5]I t Is a figure showing the end of the method of the high reliability object In this invention. 
[Drawing 6]I t Is a figure showing the failure detection of the duplicate object in this invention. 
[Drawing 7] It Is a figure showing the generation state and recovery Impossible situation of failure in the 
former. 

[Drawing 8]I t is an explanatory view of the load sharing by object movement in this invention. 

[Drawing 9]I t is a figure of the switchboard control by the object of two or more nodes to which this 

invention is applied. 

[Drawing 10]I t Is a figure of the distributed plat form where this Invention is applied. 
[Description of Notations] 

10,11,12, 13,14,15, 16,17,18, 19,20,21, 22,23,24 — Node, 100, 101, 102,103,105,106 — Object (general). 201 
[ — Method, ] — An object Identifier, 301 — The name of an object, 400, 401, 422, 423, 424, 425, 426, 405, 
406. 407, 408, 410, 411, 412, 413,414,415,420 — A message, 500,501 1000 — A high reliability object. 
1100-1101 — A false management object, 1200-1201 — Execution system duplicate object 
1300-1301, 1302, 1303 — Standby system duplicate object 1500 — A tag, 2000-2001, 2002, 2003, 2004, 
2005, 2006, 2010, 2011, 2012, 2013 — HIgh-rellabillty-lzing and a load sharing mechanism, 2050-2060 ~ A 
message queue, 2100 — The message handling mechanism In a kernel, 2200 [ — Plat form. ] — A duplicate 
message management server object 2300 — An object executed result management server object 2400 — 
A duplicate object identifier management server object 3001 
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4^-ri'f-^*^fe§„ cna. P a s s i V e R p. p 1 i 
cation/Active Replication 

[0 0 0 3] Active Repllcati 

onT\ ^^-^nVfrn^i-^K^iLib^^m^mm^m 

I^T-9-jH-h-rS7:/n-^£0^JfcLT. Fault- 
Tolerant Concurrent C*^feS. 
Ctlfex "International Sympos 
ium on Fault— Tolerant Com 
puting"tc, "F a u 1 t -T o 1 e r a n t 
Concur rentC:A Tool for Wr 
Iting Fault-TolerantDistr 
ibuted P r o g r ams" i:LT%gSnTV> 

A3— ;bfegi!]-e3ii!in?n. Active R e p I i 
c a t i o n^^5ILTV^;5fci6t, 7yU'>--i^3>' 

^m~f'<'~^yvmm\^iz.^<fji^rzib. ac t 

ive Replicatio n^iSgi: L^V^^t 
tt, mm-t^CtiiT'^rji\,\ -$P>\C^ Passive 
Replicatio n^&ffll/^SW^fcLTS, " I 
EEE Transactions on Softw 
are Engineering" (1985^6;§-^) tjf 
K^^T-fc "Implementing Fault— T 
olerant Distributed Objec 
t s " *'«feSc cnit. «*WtttP a s s i v e R 
e p 1 i c a t i o nT'feoT, ^^gP^vOl^ffl^rfrfc-^ 
ai/^il«^^xTV^S. L*^L. S5 F a u I t - T o 
lerant Distributed Object 
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immcrj:-Drmnni^^n±t^ l a s y Fa 

ult To 1 e r an c e(D#K.tS-5< nOROi/ 
^^a35:teJ (l995^10;3^)O Ty'—S'^WLitt:iry 

[0 0 0 4] 

s ^ >y -tr- i^trnzs^h \ ^mn'^it^m < c i: t & 

[0 0 0 5] 



^:/^/-xi'hK:j;:53e^SISiJffli«)KT'SS<, 
S«@rSSio^«{k. i««fWc#oT, i:»fk-^ll{k- 

fci6. ftffii^fflv^fc'fffaffipj->xxAoastt*^,^t 

^-i'/^:i-:/v'xi' I •?'5^x^' hA^^Hsnxv^ 

5o ^7-Krt^D^y->*x^hfflSP5T'^-yb 

-A (^^iir->XxA) ©HT-feS. Sii©y-F2 5© 
:/^-vh7*-A3000=}:»3 ±O0P^T'a^lS[ 

- A 3 0 0 0 <fc D TOgP^i-. o 1 1) -tJ— 

5>gS[->X-rA*iftlSLTV^5o *-^;t/ffii:HT' 

a<wi^N-K'>x7^^LTii^oa«A^fTt3n 

So 

[0007] i:C5T\ COj;-9 SW^gSHili^X-f A« 

i±. ±r comiiimmi^mtt^mm^mnt^ Ac 

tive Replication^:, 1 O©jtiyo^ 

Tb^gwt-ra^fli^^ffu ?i>3{i^ii-rsp a s s i 

ve Replication tlfh^a Active 
Replication ttffl-^ii^fiftPf 0[i]«*^Rlfil 

Slff3Xh>b<iS<SS<, iintWLT, Pa s s i 
V e Replication aSiaii^Sj^Olilfttt 
Active Replication Kit^^ tmB 

^m-^XxATHfr-rsoicjiLTfcf), 
o^ff3Xhfe{S<a]^Siii:A<T-t5o ^^t!£:i-:/-:^x 

^ hig|Rl^fT]S^tt3V>TP a s s i V e R e p 1 i 

c a t i o n-vMmmit^mmt^mz. mm. ^ut. 
X ^ rj^-r > h « 5 v^Tse^^nitv^^mc^s 

■f-S„ ftf^LTl^SCPUOjfi 
2!©#lR^^''^-K7'^'X^'0<t:3^^filT■^?fe. S/taB 
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y Y ?:ft^-r S 1. 1 It. f/i^JL ^ h A^'SVHc ^ y 

mmmm (1993^1 w^i^hw 

[0 0 0 8] mm. 

® ^« % s ^ -y -fe- t s s o 0 7 {c^-r i 
5^:^^^ i9llfT?ft«^fi3f:/i/-i^ h 1 0 5t« 

-y-fe-i;4 2 0 *3ilffl1-5:&ST'fentf, /- K 2 
0±^4:Ami^Lfc«^lcH, >?.y-lr-i?4 2 Og^*A<S 

^^n, tctKmrntmrnt^'J:!:^]' i o 5 

tt±#^IS^gl):i-:/->'xi' h 1 0 6;^)^^^a^SCfe*>A> 
to5"f, ^t^i^'x^h 1 0 50^^;'<-yt-i^4 2 O^JM 
fflLfcfci^. ffiPfTv('y-tr-S>'4 2 0A^«*$n. /- 
K2 UC^ f3#t3oTfe;>f-yb->?4 2 03b^:&l/^fti6S 

[0 0 0 9] *%^JCfc(/^T«:, Ctomm^mmLTc:^ 

ckat. ««^nfc^ •y-tr-v^A^#y-F (11.1 
2. 13) t^iSj^n. untJ;t3S1i3S07-Hl 2 

1 1 sTmsnwiummu ^v-y K*i7Bfici^gi5« 

M©-Mtt«ttE©rci6©y-yfe-i^ (US 04 1 2, 4 
1 3) ;«)^5feSST'OB#P«g^ttSo iinicJ:0. Sil^^ffi 

^m^tfi/jL^h 1 1 0 0£Dfe57-Kl 0) (DD— A 

;l/«^iJi:»«ffS^^>>x^H 1 0 oo^i-yv'x^ 

hSiiSij? 2 0 1 ^fflv^T, mm^-yi':^'^ h©4i©^ 



10 

SEiit a [S| C iftflS^t ^ s^" x^h*^e.o|5lU^>y-b 
K (05iDy-hM 1) O5M?JttiR^ft«?S0y-F 

(|w|i:<y-K 1 2. I 3) izm^t^ctic^K). W 

10 s^x^hA^nfTi^t&s^ttwsfLfe^^in, mm 
asoy-F Qfy-Fio) EfflSnL, ^ncifjft 

[0 0 10] M«tJ) 

laT-SSc m 1 ti3l^T. lltTlSO«»:t7*i>xi' h 1 

2 0 0 twm^(Dmmty'J:z'>h 1300, 1 3 0 1 

A^^^SttlH^yv'xi' F 1 0 0 0(±«fiSt5nTt/^5o M 
20 ^tf, i^gpo^i-^s^xi' F 1 0 O^o^i-^v^x ^ FM 
?2 0 1, :t-:/i'x^FOi&mf3 0 1^0;>J-ytr— 1^4 

0 oAV-F* 1 oimmt^t. /-F 1 oo««^fk 

A^^©7«-y-b-i^^^aiLT. SS:j-/->"xi^F 
1 2 0 0-\m^t^o y ■yfe-S/'4 0 OOfe^M^Sltfc 

?fK5i-y->"xi' F 1200a. y y-y v^mnt^o n 
n^t-i^mmt^t. atfiL/cy-y-tr-i^'afei© 

^ 0 1 . tfi^jL^ho^ms 0 1 ©^i-^s^ 
30 x^^FA^^ftLTv^si^tiiaij^nao LA^fe^ as 

;i-y$^*xi'Fo#fea»j?nsv\ iMfc, mnmiDm 

ntfyj^^h 1 2 0 oA^SO^^y-tr-v'a. ftMWt: 

• m^mmm(Dmmizi: »? y- f 1 0 ±o:t^i-'x 

FMSIJ?2 0 U :i-y>^x^^FO«lu3 0 10:^-yi/'x 
FA^^jMM^nTV^S>< -y^r->^4 0 1 Tfe§A>0<fc 
3lC«MSnSo <l©^fe. ngi5A^&{±:ty'>'x^F«S 
glJ^ZO K *:/-:'xi'F©^M3 0 l©^:/5^xi7F 

A^#ftLTv^s<t3cMM?nSo o^t). y-Fi 0 
1 1 2<D]«ffl«{b . yii~i^iD9mm 

40 I?. ^lglcli#ffiLSv«WS5fy->"xi7 F 1 

1 0 0 A'iSftL, ^0«{JaWa:tyi/"x^ F 1 1 0 OA^ 
ffifi^yi^x i'Fl200, 1300, 1301 ©»lf^ 
^gilLTV-SfeOtjeSt-SdilA^T'^So m^f}-'^ 

(DTi'^izxii. mmmmtzn^ji^hi i o ot^itLT 

[0011] Ci^ft^fb • m 2 

a. «wi:-fti^5^sjiiaov7F«fi!tiaT£§<, 

fc% ^-9— /^^:/v'x^F©l¥fflf±^M-rSo 02lcfc 

v^T. iSMMt ■ Mm^^WLmmz 0 1 0 {±y- fig® 

so y^-y F7*-A3 0 0 1 rtCl«*^?tlTfeD. cnA^ 
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y-Fi7, 18, 1 9imm^H. mm^nr^m^ 

tl5 (^n^n2 oil, 2 0 1 2, 2 0 1 3) „ 

^-)\yz 1 ooa. ji'fto»iS[0SO*-:?^;l/l<:!KS©:f 

7i>'x ncHt ^ ^ y 't~>^(Dmmmmb^Hi}a-^nrz 

K 1 7 i:y-K 1 8©;i-:rs^*xi' hRg-^fffcnTV>5 
*\ A3 0 0 1 m^T^Tif^^ 

gs^3^:/>/'x^^^cg^)We.ns (423, 424, 

4 2 5, 4 2 6) o /-F^iSS^^. (?i|x{fy-F 1 
9^ftS^-&Ji:{±. ^-y-b-i^^^a- (2 0 5 0, 2 0 
6 0) *»i-rSo ^(DTcl^K, ±1-3^)12 1 0 OCX 

Wi4-7-S>-x^ hA^5^fT^©ffl»y->"x^ h-\>! 

fc. >y -b— >*Sa-9— /^:tri?x h 2 2 0 0 

[0 0 12] |H|L:,aMig^y>^xi7F«4"53S&5lIS 

>y -b-i^-i^ffltc p< V -y Fei&;£l»<'1t^«*3i-y 
>^x ^ F^fTlS*©a-9--^<?:t75/*x F 2 3 0 0 1 J: 

X F 2 4 0 0 a. *-*;l/A^«{Kea:i-:75^x ^ FO 

;}-:?"v'x^ Fi^SlJ?§*^?.II^TSO«S:tri^x^ F© 

1 0 0Oft5©^^x-:^;Hc@6tii:-rsxyFU*^&v> 
^S;d-7i^x^ FiiSiMa^t-/':^i-7->'x 
^7 F 2 4 0 0 tP^v^^^^So ^fc. m'fs^h'^Wt-:^ 

'J:!.'?vmm^m^-)^ic':rv:!L^ f 2 4 o o -y 

©rt§*SM-r5;ii:&T'€5„ ?lg^:7>/-x^F^ff 

gg-it-/^:t:/>^x ^ F 2 5 0 0 tt. ^©7- F±C# 

fiLTv^sffifi:e-:/s?x^F©*^TttM*ea-rso ^i- 

i^xi'F^*?'B-Be»;-r5atBfe«f-3TV>5o ±12-9- 
-/^:t:/>'xi' F (2200—2 500) {i, K 

^clo^*^oT^/^so"^?. :t:?'s^x^Fi^Simiy-K 
P.S:^t^^*^§iggiJ?*»J ?) STSo il 3 -r S C 

[0013] :/>'*x ^ F C»« -y -b-i^'SM] 



a 3 tt. :/;^x ^ f a^>< >y -b— lt. 
p(v-y F^fiii-rsttM^^-r^T'SS^ aflll^i-^s/' 

X ^ F a. i^gPA^ p-nffl-r s t . K 1 c^-r <fc ^ tarn 
Ba^:/>?xi^ F>b«-rs^RiT{e#ftLTv-s ct a t 

i^x^' F 1 10 G*^#a-r«/-K 1 GfciiJ«-rs^;, 

7- F 1 0 <D,ttM»t • fkmrnwrn 2000 (*-:7^ 
x^^Fi 1 0 o^T'fesch^^^m-r-So *-^;n*itc 

0 0>b^5l^ff^®ffim:/>''xi7 F 1 2 0 0 mm^.(D 

y-F* 1 ooft'oiSffliSfb • mi^^m 

«2 0 0 o©«fi:t^-:^xi' FiiSiJ?sa-9— 
x^FtPpg^,^^^^^±T. i£:^S§x-^*^fSo c:iiT\ 
«S^7->'xi' FCft^feJSti. ffimOM/^T^-^-rntf 

^hl 10 0 ©#ffi-r y- F 1 0 t -y-tr-i^'afiA^ 

«y -b— :?iattD#?lcM*^4C30{i, afli^«?g* 
M-&fc#7-FP^T-S&f). /-Fgft©ft?^feSS:S 

*^bT-feSo Mimit ■ n^^mmmz o o o (*-^ 

;H^p<-ytr->'VN>F'J>i7"«fi) a. gftiSofc^^-y 
■fe->'4 0 5^ll^flSO«S5*-y->'xi' F 1 2 0 0 

ffl-r-5 (4 0 6) „ ^^{c. 'im^o)mm:^-:fi^j^'>h 

©#ttLTV^5y- F 1 2 . 13 ©iS Wb • ft#^^ 
««|2002. 2003 (^tS!>{'yb-'>*ea-9— 
30 yi/*x ^ F ) tc^J LT t., ^ >y -b- LT^«-r 
S (4 0 7, 4 0 8) c ?t©«S?nrc><>y-b-i^ (4 
0 7, 4 0 8) fct±, y-Fl OOn-:^;!/^-^^-^^ 
SLfty-yfe-i^4 0 SOSfSOBfSiJ^AnSc C03B$ 

SiJ*Wi«^:/->"xi' F 1 0 0 ooy y >y F^BRiBt^jt 
»JT' fe. n > If >/xxA4' T-oiiaw^MT- 1 « 

5^'>XxAT'OiiaW^Mi:LT{±, ^-y-fe 

ty 'y-b-i/*i45<DMBtMO'5 ■^:;'c?t/^7^t 1 ^Anxfc 
40 tO^irLV^ttaBJSiJ il-rs V e c t o r Clock 

A^i^ji:LTi*if e.nSo ^asoftM^tyv'x^ fa^'s 

a-r^y- Fl 2, 1 3-ei±. PMLfey •y-tr-i^4 0 
7, 4 0 8a,ft-fgMb-m^t^MiHi2 0 0 2, 2 0 0 

3 easy -tr— >*sa-9— /'t^^i^x ^ f ) t^u^t 
soT% Mi!3f:/-:;'x^7 f 1 3 0 0, 1301 imv^L 

• m^wimm2 002. 2003 (« 
My-y-b-'>-ea-9— /^^v^v'xi^F) y-y-t-s/" 

4 0 7, 4 0 S^Sffi-rSi:^ y-FD-*;l'^::5fl'v 

50 fflt/^S, 
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[0014] mmm^-fi^^ 'p^ni^vv Fosff] 

So mi^nm.m-^'J^^V 1 2 0 oa. :Hg|5'\0{t 

LTKiffrSo :i-p^-:;^xd' M 2 0 oft^^:/^;^^' h^i- 

F®5fe^A^e.i:SSc tifoT. ^i.^V-yF5 0 0T\ 
^^gP©;^-:/i/"x^7 h 1 0 1 >'2f{i4 1 OA^ 

•5i:. ^^-yi/xi'h 1 0 l^?{'y-l2-v'4 1 OhfBICrt 

:/S^x^' h 1 0 1 Ot^SlJb^^a;?? >yfe-s7*§ttSlX 

&5o CT^tf, ^^i>x^M 0 lA^l^^ttS^Wft 

-rSt)-^, a^BftrSfSM^tyi^'xi' F 10 0 0 
y >y K 5 0 0 * 2 |l]JX±SlfT-r S C i: A^^o T fe, 20 
^gp®;i-:/i^x^'H 0 i'\<D{tM*jBiisav^J;5a: 

lft««:t7i^xi^h 1 0 0 OOUfT 

?S^«S^:/e^xi7h 1 2 0 0A^?)O^-yfe— >'4 i oic 
a, rafB«>l-7-i>x^h£D5l-y->-x;^Fiiii)jiJ?, MfttW 
a^^-y i/'x ^7 F -eo^ -y -t— >'§mff#^J. 7t V -v FiiSiJ 

^£0;<V-y FrtT-(D^a!'^-«f'FfflC-3V>T051i^A 

Co 0 1 53 fflmo^fawt • ^m'^wmm-cmm.o^ 
saiT-asv^o fesy-Hi 5*^, iy-Fo^t^i^x^ 

F 1 0 l^(D;><tyt-i^'4 1 O^rSmbfc^^, ^©fl 
fflMKM-rs^y 1 5 0 O/b^^JtiT'feSA^SA^^I^'^ 
5o SaTSntf. ^0^?^1 5 0 OillllUrtSOfeO 

T. p«y-yF5 0 1 O^tT^PfgiiS-rSo ^LT, ;>{y-y 

^ra-ZTfei?. ;^^-3:5?^i 5 0 ofciHii;rt^©?>o*^#ft 

LTV^fc^^Cli. PlDiffiftlS^ty'i^xi' F 1 0 0 0(D 4o 
45-?. iRP*Ccfci3*fTmafi:ty'->"x^'FA^^f)§feo 
fcfeOtfiMLTs ^y -y F 5 0 1 ©^mifft'^u^ 
^ fc. LTfc'V^fcS^S*%iS«^yv^x F 
=fc a S jS^o $ <y -b-i;^3M«T'S o fcM^tc 

>>'x ^7 F y -y F«iifT©ll7i$-efe t) . iintov^ 

[0016] 7'i^'x F y -y FOll?T<D 

^7] m 5 fi. ftfl^:^ y$^x F y «y FOUR© 50 



^7i!)f^^St-^T?£§o Hffl^aS^t^S^xi'F 1 2 
0 0©yy-y F5 0 0«llf^O*l75:^O/-FOlaffl 

2001 in^<D^7%Jia-r-5<, c:©it^ST% ^^gpoT 

3 F ^ a, :/s^x 

F 1 0 0 0 Op( y -y F 5 0 0 ©||fTtt^7 LTV>5 J; 3 

'jiwm 2 0 0 1 y -y F 5 0 0 -z?fTt3nfcna5^ 

0 ^ -y -tr— >'3Sft. L < {4^tf ss^sMsaaoaffi^ 
is-<. ^n*«LTt/^rc&^ff, ^®3iM^t/-Fi 
5 • %W7iwm i^-T'y^ ^ vmi^wm 

W^-i'^il^T'Js. F) 2 0 0 5 JcfuiE©^ ^ 15 0 0 

i:ffi^i»a©«i?ai{i:©^>y-i2-s;'4 1 \ itmmt^. * 
fc, #iiis©iss:t:r?^xi'F©i¥«-r5y-Fi 2. 

1 3©iaflMk-ftlf5}-SfiS«2 0 0 2. 2 0 0 3 
fip<>y-b-i/'Wa-'t-^^5i-7->*x^'F) ^y>yF5 
0 0^fi»i-rsS«i:Sofc^-yfe-i/* (113 0 4 0 

7, 4 0 8) 05sss*t, y-F 1 oofmtiH-rs 
■[t«^. ii?Ti^«S3ry-:;xi' F 1 2 0 o©rtgimitc 
H-rslfS*#t?^-y-b-S^4 1 2, 4 1 3J£aiM-r 

[0 0 1 7] y-Ki 5!b<^<«yb-j?4 1 i^smt^ 

t. ^ntOl^TV>Si««^fkKM-rSi5zi^l 5 0 0*^ 

im^<Dm}itX'hti\f. ^©^^^}cm-rsp«y -y f 
(Dmnmm^^mt?>. /-fi 2, 1 sic^^-^mm 
it-m^^mmzooz, 2003 M^^y-b— 

^'C:i-:7i;x^F) A<^«yt-i^4 12, 4 13 

sy- K 1 0 mmm{t ■ M^mmmz o o o (*- 

^^;KD>5 -y -t-i/'^OU ^^'•^tl) A^f.3M«:^nfc>{ >y 
■b-i^' (03O4 0 7, 4 0 8) 043A^?>. ^ y -y F 5 

orcrtgP«SgtMtSlf|gT\ ^ll?^Offi«:tyS/"x^ 

F 1 3 0 0. 1 3 0 1 ofigp^m^Mff-r^o ?e>t. 
m7^^m^y'Js.^Y(r>/~Y 1 1 tcM-rsa^f o'lf 

«i:S5J-©y-FOfi?t«1fffi^it«^LT. s^oy- 

ys^x ^ F ©#ffi-r 5 y - F 1 0 oiSMt • nrn'^Wi 
mmz 0 0 0 («s:i-:/->"x ^ Fisgij?ea-9--^<^:/ 
->-x^/F) taa-rs. 

[0018] mm^^'J^ ^ F osst^i^ffl] 0 6 a. 
^-TAr-j/F^fflv^fcasfPi^ai^^-r^T'SSo ^spa^ 

^ftfflM:^-y~>*xi7 F 1 0 0 O'XjM^Sn/'ot >y-tr-i^- 

4 0 5a, mmz\mm:mtiri;x^ Yoymmm^t • 

ft#i>tS[a« 2 0 0 0 (*-^^;l/<!0^ -y -b— >-M> F 'J 

>^*litg) *^ftfi«^ys;x^' F 1 0 0 o^T?ss 
f±iL. mn^(Dm.m^yi^:L'yh 1 2 o o 
ffifi^tys^x ^ F 1 3 0 0 , 13 0 1 offfitsy- F 
12. 13 ©lafi^ft • mmmm2 002. 200 
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3 («s^>y-t?-s/"Ba^^-A:t:/>>i^h) izmmt 
5= y- K 1 2 , 13 (Dammit ■ m^mmm 200 

2, 2 0 0 3 M^-y-b-i>-ga-9— ^^^^S^x^J' 
h) li. ^O^-yfe-S^4 0 7, 4 0 8*Sk.5o 

p^$&^ff3o mn^mm^iry'J:^^ m 2 0 oo^y «y 

F 5 0 0 0||f?*^]E L < ^7 Lfc^^t ti. /- K 1 
2, 1 SOlSWk • m'HWmZ 0 0 2. 2 0 0 3 

[00191 cw^ia t i sits=i-:/5^x h (Dmm 
X.] Mao i 3 Kws^^i^m x^TzMmmit • 

^2 0 0 2, 2 0 0 3 /^Ji-y 
->*i^h) tt. §53-07- FiT'ttftLTl/^^^M^:/ 
i/*x ^ M 3 0 0 , 1 3 0 1 OMite*P<T. S» 
(Om'^mn^i. [l5>oy- F±T?ilfl:LTt.^S«^3i- 

:^-^i?x M 3 0 0 0:&*^fll^feS*^ftV^i:-rSc fffc 20 

tJ:||ffl^li:ft-DfcMiS:3-:/i?x;' h i 3 o Oti, 

-i;ga-9--/U:^i^x^' *^^«#^nTv^i,y -y 
-Ir-i? 4 0 7 ^gtj-Bj ti ^ ^ y -y Y^mit^c Mim 

ft • ti^^fcif«i2 0 0 2 mmy^j^ ^ vmi'^m 

-9— M4-:/i^x^b) ^S^rrs^x^h 1 3 0 0CO 

fll^feJS^ 1 o±tf 5„ iSfflSft • ft#»ii(^«2 
0 0 2 («fi>{>yb-i;©a-9— /^^:^->*x^ F) a. 
«<Etsa:^-:/i^x^ F 1 1 0 0(D»Sy-K 1 0©]Sffi 

ws^t-^'5:^-:^i^x^F) mmm^nmrntyi^x. 

^FOfeSy-Fl3 • 2 0 0 

3 («S:ty"->'x ^7 FaEgiJ?Wa-^-^^"5i-:^i/*x ^ F) 

m#^^M«2 0 0 3 (ffim7i^'x^FlltTg»- 

/'?:tr':^x^'F) ti. i5i-oy-F±oas!:i-ys?x^ 

F 1 3 0 1 1 •o±tf So 

[0 0 2 0] JiiBullfTi^o«»5i-:/-:^x^ F*^ 

SffiLTv^fty-KoffifiMb • :&#^)-f««2 o o i 
mm^yj^ ^ F^fTea^-/^5i-yi^x ^ f) 40 
LT. ^mmit • ^mmimmz 002 (ffi»:t:ri^*x 

^ F^fTWa-9— ^^^:/i^'x ^7 F) A^ffiS:ty->"x "7 F 

i:, y-F 1 1 oas*ys/"x^ F 1 2 0 oAwesi^ 
nsc iio^ic. aii:t::/->^x^ F 1 2 0 omrmtE 
LTv^fcsstf. senisnso y-Ki 1 
T««^yi>xi'F*^Bfift2nfc^-a-{c{i, i^aw® 

3(j^iii7LfcB#tcfi. ^tffisom«*7s^'xi' F^i^^«3g 

S^x F ICS bTrtg|5«ffi<D-Ktt*«iE-r 50 



S:i-:/->'x^FSfi»I/b^fS^LTt.. rtgWO-Mtt 
5r«iiE-rsMat±iTfctiiJSi:LSv\ Tct^. y-F 
1 i€>ft#*^a#c;ai/^ci:^tcif), aS:i-:/->'x^' 

F 1 2 0 0©SjS*«il<. iSli*LTV^S:V>lC|>3b^ib>t>e. 

(omn^o:iWM:f:fiy3L^h 1200 iiirLi/^Siiff^o 

ffiS^yS/'xi/ F 1 3 0 0*^??fiLTfe. :ty-:^xi' F 
Vn^^J- K 1 3 • gL#5i-i!t««2 0 0 3 

S:ttn{f , i^J-i €l5feS[OiSv^^«l^mS^j-:/i^x 
FA^^TaSfl^LTV^S i:W»f LT. @^»tI^C^:s 

A^'T-#^:<Sorcr-^fOrt§tt. ^Ifi^f^i^x Fsi 

[002 1] [a^:i-:ri;x^/ FOft?^ t 
5fe{c. 0 5 ©iKBUt i t) iafflffi:i-7>?x F 1 0 0 0 
^3tt5 ?{ y -y F 5 0 0 ©HfrOiSlTO^^^*^ L?-c. ^ 
il T% llfTl^oaS:t ^i^x ^ F /b^>< y >y F**I7 Lfc 
lS«IS{b-ft^^Si5««l2 0 0 1. 2 0 0 2. 2 
0 0 3oKim^J;t)#y-F 1 I , 12. 1 3 0^#0 
1ffl8AMIS{l:-M#^t!C««2 0 0 0 mm-7'J:L 

^7 FiEgiJ7ea^-A;i-7i?x^ F) tm«-rsii«t 
ov^TSi^Lfeo iint<k»3. «<w§a:4-:7i^xi'Fo 
#ffi-r s y- K 1 0 OiSMi: • ^rn^mm 2000 
(«S:^-:^i^xi/ Ffisij^wa^t-z^^ye^x^' F) 

(i. HomS^^i^xi'F*'^ ftl^A^gW-FT^fr 

[0022] mmfi^j^-^hio^^mnK^^m 
^] Huao<fc5tCx tuHKoyy-y Fo^s^oy-Fo 
ft^ti^?£ttT&<. ^mit ' mmmmz 000 

y- FMS^©1f ffi^^gp*^ itS#^ S c J; D . ^ 

^mmit ■ m'^mmmz 0 00 cD^^cDti-^)imw. 
S:tyi/*x^/ Ftii-rs7"-y;i/h«»:^-yv/*x^/ Fii 

SiJ?Wa-9— ^ ^-^t y s^*x ^ F oj^f-or- 

ys?xi^ FilgiJ7ea-9— /^^ys^^x^ Ftcy -y-tr-S/- 

[002 3] [:ty>^x ^7 F ©^UlA^nltlSll^Oftl^ 

:5m] S8{±. :^-yi^x^'F^gIR]^>t!t->xxA^^4ol^ 
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110 0 tmnmmm^:fi^3^ ^ h 1 2 o o mm^m 

m^tf'Jsii^h \ 300, 1 3 0 1 T 1 MM:t:/ 

M 1 0 1 tmn^mm:ir-/i^jL^\' 1201 mm 

mm:^'fi^3L^}' 1 3 02, 1 3 0 3T'100i««^:t 
yi/'x^/h^WfigLTU^S^ y-Ki o©^a«ffi{b-ft 
M^W«2 0 0 0 mmf:fi^a: ^ HigO^gil^t- 
ta. 7-Fl 1, 12, ISOftlf 
O'IflBfc, /-F2 2, 2 3, 2 4 O||M<0'|f fg*^ma 

2 , 2 3, 2 4 0^#*^ift< S D , iSasf < TfeUff 
l^1«»:t:/S^x M 2 0 1 CD!im*m< % D . 7- K 

2 3, 2 4l?tj;f3?S^ti^^^nfcii^t. y-Fl 
1. 12. 1 3 0^^tAHg;V>Bttf±, ffiS;j-7"i^xi'h 
1 20 1, 1 302. 1 303*y— Kll. 12. 1 

3 t^i&LT. h:&±tf 5 c i: fcwr^ 
[0 0 2 4] [*fflsnr?:m#ffSofiM;^a] 

[0 0 2 5] [Call Manage r^COmm} C 

ft-rS Call Manager iriq^ffnS^-Tv'x ^ 
h ?>]liffl*f*T'fe5o Call Manager {i, fc 

1 1 e T ^mm(Dff9m^n^ C a l l e e^SfiJt-r 
^-^b-i>3 >:i/XxAA^ftM«^:/5^"xi' F{C[p]-3T 

■p^HWlePiSy- K© C P U«ig^fl*) 

^ft©;^;i/-:^-y F^±if s ;i fcAWt^TSs. 

[0 0 2 6] /^OftflMk • MM6m-\(Dm 



-Ati:. »f(>'XxA±T':t^S^xi7 FA»-r5©£ 
ttlll^fcfi E C ©ffiS!;i-:/>'x F {ctt« L T S 0*^ 

[0 0 2 7] i-^^iyxy-KcDMmmittm^myjm 

[0028] 

- F-e©^ <y-fe-v-*ffi^pfc rtg|5mi-g(©fci6©^{ >vtr 
0i«faf^^:7i>x F ^mit^mic^mftrs t> a 

OV^Tfe. «€«^y->"x^'F©i^gR'\©{1:ffl^Wx.5 
I^T'fe5A^SA^©?«S©S!iaA^^2SSfc^S„ *5IB^T- 

im 1 ] *»BS©-iyfiffa*5^-r*:7i?x ^ hWM^^ 

«S i:1-sia««:i-:/i7x ^ F ©HTfe^So 
[02] *flBl!lc*J^J-§K««ft-fii^f^^M«^*- 

[^3] *feH^ttelJSS««^:/s^xi/F©><-y-tr- 

>^©§fi^^N-r0Tfe;5o 

[1^4] *SIEat*5lJSi«ffl«:j-ys?x^'F©^V-y F 
©HfT^^-THT-feSo 

[H 5 ] i««^*^S^x ^ F © p< y -y F 

[He] *%B^lcfc-itS««:*-:/'>*x^F©i»^i|tHi^ 

[H7] '<}tm^:toif ^^mmsi^m tmm^m^m 

50 ^-THT-feS. 



19 

10, 11,12,13,14,15.16.17,18,1 
9 ,2 0 ,2 1 ,2 2 ,2 3 ,2 4 --y— 10 0.10 
1 , 1 0 2 , 1 0 3 ,1 0 5 ,1 0 6- oty-:/!^ h(- 10 
fiS). 2 0 1 -A-Ji/x. h^gij?. 3 0 1 
^S'hC^BU. 4 0 0,4 0 1,4 22,4 23.4 2 4,4 
25,426,405,406.407,408.410,4 
11,412,4 13.414,415,4 2 O-p^-y-fe— 
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v'. 5 0 0, 5 0 l-p<V-yK. 1 0 0 0 
fy'x^h. 1100, 110 i-miU.^mir-/'JjL^ 

1 2 0 0. 1 2 0 1 -mnmrnrntfi^jLirh. 
1 3 00. 1 30 1, 1 30 2, 1 

;i-ys^x^'h, 1 5 0 O-^f-J^, 2000,2001,2 
002.2003.2004.2005,2006,201 

0,20 1 1 ,20 1 2 .20 1 3-mmit-mi&m. 

WM. 2 0 5 0, 2 0 6 O-^-y-fe-v'^ji-. 2 10 
0-tl-^/]yfy}l'yb-iy^-^y¥Vyi^'mm. 2 2 0 0 
-«iUp(>y-t-s;§ii-9--7^^7->*xi' 2 3 0 0 - 

;i-^-:>x i7 h^fT^mwS+J— ^^^^i/'x ^7 2 4 0 
0 •••as:t:;^i^x M|SMa-9--^^:4-:ri^x 

300 l-f^yhyt-l^o 
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